Developing for Developers – Path to Fame, Money, and Happiness
Opportunities for technologists to create developer-focused businesses; plus advantages to building them on the cloud provider.
IBM AIX 7.3 — CVE-2004-0544 — buffer overflow — patch and remediation guide
🟠 High ⏱ 30–90 min Last verified: 10 August 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2004-0544, IBM Support Bulletin CVE: CVE-2004-0544 NVD summary: Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands. […]
How to Install Minio as S3-Compatible Storage on Debian 11
Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up install minio as s3-compatible storage on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step carefully […]
Oracle Linux 8 — systemd security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2021-1611)
🟡 Medium ⏱ 10–30 min Last verified: 9 August 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-1611 Related CVEs: CVE-2020-13776 CVE-2019-3842 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
IBM AIX 7.3 — CVE-2015-9281 — vulnerability — patch and remediation guide
🟡 Medium ⏱ 15–45 min Last verified: 9 August 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2015-9281, IBM PSIRT advisory page CVE: CVE-2015-9281 NVD summary: Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page. References: support.sas.com/kb/55/537.html support.sas.com/kb/55/537.html Table of contents […]
FreeBSD 13 — py310-treq — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 9 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-treq — sensitive information leak vulnerability Related CVEs: CVE-2022-23607 Upstream summary: Treq's request methods (`treq.get`, `treq.post`, `HTTPClient.request`, `HTTPClient.get`, etc.) accept cookies as a dictionary. Such cookies are not bound to […]
FreeBSD 13 — linux-f10-gnutls — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 9 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnutls — multiple certificate verification issues Related CVEs: CVE-2014-0092 CVE-2014-1959 Upstream summary: GnuTLS project reports: A vulnerability was discovered that affects the certificate verification functions of all gnutls versions. A […]
Ubuntu 22.04 LTS SSH Service Fails After Host Key Permission Change
🟡 Medium ⏱ 5–30 min Last verified: 9 August 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
How to Configure Device Drivers on IBM AIX 7.3
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to configure device drivers on IBM AIX 7.3 with practical […]
FreeBSD 13 — zabbix32-server — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 9 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Zabbix — Remote code execution Related CVEs: CVE-2017-2824 Upstream summary: mitre reports: An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted […]
